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Preface 


Wire: to the MCSE Guide to Microsoft Windows 2000 Active Directory! This book 
provides in-depth coverage of the knowledge and skills required to pass Microsoft cer- 
tification exam #70-217: Implementing and Administering a Microsoft Windows 2000 Directory 
Services Infrastructure. This course of study prepares a network professional to work in medium 
to very large computing environments that use the Windows 2000 network operating system. 
Organizations place greater and greater demand on their networks and the services those net- 
works deliver, often providing round-the-clock services to both internal and external clients. 
Therefore, there is increased demand for network professionals who can design flexible, usable 


directory service implementations that can properly advertise and support all necessary net- 
work services, as well as the users and groups who make use of them. 


THE INTENDED AUDIENCE 


The goal of this book is to teach directory services implementation and administration 
to individuals who desire to learn about that topic for practical purposes, as well as those 
who wish to pass Microsoft certification exam #70-217.This book provides the content 
for all the skills measured on that exam, but also provides related information that is not 
directly tested. 


Chapter 1, “Introduction to Active Directory,’ provides an overview of the concepts and 
capabilities inherent in Microsoft’s Active Directory directory services environment, so 
essential to the proper design and delivery of network services on large, complex networks. 
Chapter 1 explains the logical and physical structures of Active Directory, and introduces 
the basics involved in working with Active Directory from initial directory design, through 
the installation process, and in working with and maintaining Active Directory thereafter. 
Chapter 2,“The Structure of Active Directory,’ explores the server roles involved in oper- 
ating an Active Directory environment, the various components that appear within Active 
Directory databases, and the physical structures into which Active Directory installations 
fall. Chapter 3, “Planning an Active Directory Implementation,’ focuses on understand- 
ing an organization’s physical and political structures and explains how to map them into 
appropriate namespaces, site designs, domain structures, and organizational units (OUs). 


xvi 


MCSE Guide to Microsoft Windows 2000 Active Directory 


Chapter 4, “Domain Name System (DNS),’explores the structures, functions, and rela- 
tionships among name servers, and how those servers interact to maintain an up-to-date 
distributed DNS database. Chapter 4 also explores how to integrate and manage DNS 
alongside Active Directory, particularly to support a Dynamic DNS (DDNS) environment. 
Chapter 5, “Installing Active Directory,’ zeroes in on preparations for and installation of 
Active Directory, including domain creation and working with Active Directory Wizards. 
Chapter 5 also explains how to properly understand the Active Directory database and 
Active Directory domain modes. 


Chapter 6, “Active Directory Configuration,” picks up where Chapter 5 leaves off, as it 
describes the requirements for and activities involved in configuring Active Directory for any 
specific installation. Chapter 6 covers all the necessary details involved in site creation and in 
implementing organizational units and using them to delegate authority and manage groups. 
Chapter 7, “Administering Active Directory,’ focuses on the ongoing maintenance and 
upkeep involved in managing an Active Directory environment, including how to query the 
database, working with permissions, managing resources, moving objects around a directory 
tree or forest, and delegating authority. 


Chapter 8, “Performance Monitoring,” begins with a basic overview of Windows 2000 
performance monitoring terms, tools, and techniques. Chapter 8 continues with coverage 
of the Windows 2000 System Monitor, along with objects and counters relevant to Active 
Directory, as well as event logs, specific instrumentation, and tools specific to monitoring 
Active Directory per se. Chapter 9, “Active Directory Maintenance and Recovery,’ looks 
at what’s involved in protecting the Active Directory database, and in recovering from 
errors or failures that affect this vital service. Topics covered include a review of the Active 
Directory Data model, discussion of key Active Directory files and dependencies, plus 
issues related to backing up, cleaning up, and restoring Active Directory itself. 


Chapter 10, “Implementing Group Policy,’ covers key concepts related to the Group Policy 
Object, and explains how to plan and implement effective Group Policies. Chapter 11, 
“Managing User Environments with Group Policy,’ picks up where Chapter 10 leaves off, 
as it explores how to use scripts and administrative templates to control the user environ- 
ment, and how to use folder redirection to relocate user files on some server. Chapter 12, 
“Deploying and Managing Software by Using Group Policy,’ explores further use of the 
Group Policy Object, along with system components like IntelliMirror, to prepare, distrib- 
ute, and manage software deployment in an Active Directory based environment. 


Chapter 13, “Deploying Windows 2000 Using Remote Installation Services,’ explores what 
RIS can do, and how it works with DNS, DHCP, and Active Directory to enable easy remote 
installation of Windows 2000 clients and servers. Chapter 14, “Active Directory 
Replication,’ explores the replication process in an Active Directory environment, including 
its intra- and inter-site behavior. Chapter 15, “Security,” addresses security matters relevant 
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to Active Directory, including auditing, security templates, and the Security Configuration 
and Analysis Tool. 


FEATURES 


To ensure a successful learning experience, this book includes the following pedagogical 
features: 

a Chapter Objectives: Each chapter in this book begins with a detailed list of the con- 
cepts to be mastered within that chapter. This list provides you with a quick reference 
to the contents of that chapter, as well as a useful study aid. 

a Illustrations and Tables: Numerous illustrations of server screens and components 
aid you in the visualization of common setup steps, theories, and concepts. In addi- 
tion, many tables provide details and comparisons of both practical and theoretical 
information and can be used for a quick review of topics. 


At the end of each chapter is a Chapter Summary, a bulleted list is that gives a brief but 

complete summary of the chapter. 

Appendix B includes the following features to reinforce the material covered in each chapter: 
a Key Terms List: A list of all new terms and their definitions for each chapter. 


a Review Questions: A list of review questions tests your knowledge of the most 
important concepts covered in each chapter. 


a Hands-on Projects: Hands-on projects help you to apply the knowledge gained in 
each chapter. 


a Case Projects: Case projects take you through real-world scenarios for the material 
covered in each chapter. 


On the CD-ROM: On the CD-ROM you will find CoursePrep® exam preparation soft- 
ware, which provides 50 sample MCSE exam questions mirroring the look and feel of the 
MCSE exams, and CourseSim® simulation software, which allows you to perform tasks in 
a simulated Active Directory environment. 


TEXT AND GRAPHIC CONVENTIONS 


Wherever appropriate, additional information and exercises have been added to this book to 
help you better understand what is being discussed in the chapter. Icons throughout the text 
alert you to additional materials. The icons used in this textbook are as follows: 


The Note icon is used to present additional helpful material related to the 
a | subject being described. 
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Each Hands-on Project in this book is preceded by the Hands-On icon 
| and a description of the exercise that follows. 


nario-based assignments. In this extensive case example, you are asked to 


oe | Case project icons mark the case project. These are more involved, sce- 
implement independently what you have learned. 


INSTRUCTOR'S MATERIALS 


The following supplemental materials are available when this book is used in a classroom 
setting. All of the supplements available with this book are provided to the instructor on a 
single CD-ROM. 


Electronic Instructor’s Manual. The Instructor’s Manual that accompanies this textbook 
includes: 
a Additional instructional material to assist in class preparation, including suggestions for 
classroom activities, discussion topics, and additional projects. 


a Solutions to all end-of-chapter materials, including the Review Questions, Hands-on 
Projects, and Case Projects. 


Exam View® This textbook is accompanied by Exam View, a powerful testing software pack- 
age that allows instructors to create and administer printed, computer (LAN-based), and 
Internet exams. ExamView includes hundreds of questions that correspond to the topics cov- 
ered in this text, enabling students to generate detailed study guides that include page refer- 
ences for further review. The computer-based and Internet testing components allow 
students to take exams at their computers, and also save the instructor time by grading each 
exam automatically. 


PowerPoint presentations. This book comes with Microsoft PowerPoint slides for each 
chapter. These are included as a teaching aid for classroom presentation, to make available to 
students on the network for chapter review, or to be printed for classroom distribution. 
Instructors, please feel at liberty to add your own slides for additional topics you introduce 
to the class. 


Read This Before You Begin 


TO THE USER 


This book was written with the network professional in mind. It provides an excellent 
preparation for the Microsoft certification exam #70-217, and also for the real-life tasks 
involved in implementing and administering directory services for today’s networks, which 
must support an ever-increasing variety of users, services, and applications . To fully benefit 
from the content and the projects presented here, you will need access to a classroom lab con- 
taining computers configured as follows: 

a Windows 2000 Server or Windows 2000 Advanced Server. In a classroom lab 


situation each student or pair of students should have a computer capable of running 
Windows 2000 Server or Windows 2000 Advanced Server. 


a An Internet connection is helpful, and will be required for some of the case projects. 


VISIT OUR WorLD WIDE WEB SITE 


Additional materials designed especially for you might be available for your course on the 
World Wide Web. Go to www.course.com. Search for this book title periodically on the Course 
Technology Web site for more details. 


TO THE INSTRUCTOR 


When setting up a classroom lab, make sure each student workstation is capable of run- 
ning Windows 2000 Server. Students will need access to the Windows 2000 source files 
when they install Windows 2000 Server and when they require access to various services 
during the hands-on projects. Detailed setup instructions for the labs are contained in the 
Instructor’s Manual. 


